kirschbaum-development/monitor

Dangerous workflowscaution

One workflow uses pull_request_target, which requires careful review because it can run with elevated repository context; no untrusted checkouts or script-injection patterns were detected.

Lifecycle scriptscaution

The package runs post-autoload-dump and post-install-cmd scripts, increasing installation-time behavior and review requirements compared with a package without lifecycle hooks.

Release historycaution

The package is 454 days old with five releases and one release in the last 12 months; the latest release is current, but the longer-term cadence is limited.

Repo commit activitycaution

The repository records zero commits and zero active maintainers in the last three months, a significant maintenance concern, although six pull requests were merged in the last month and the repository was recently pushed.

Repo popularitycaution

The repository has only two stars, zero forks, and one watcher, so external adoption evidence is limited; this is supporting evidence rather than a decisive health failure.